bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917

Analysis

max time kernel
208s
max time network
219s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:31

Target

bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe
Size

152KB
MD5

eb9f28b6b0877b9a39f3f6f0eefef9a0
SHA1

ea399d5d13ac71039cdc70d13f9d697ca1acc853
SHA256

bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917
SHA512

cc257f6cd72a0972fc651e8af54be0d924ad8336f613b39233f7267216f3b45c5506559617db166711097ac129fc464460efa7fcfa3e555d2b12b92386b4ed5a
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3412 2708 WerFault.exe bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe

pid process

2708 bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe

pid	pid_target	process	target process
3412	2708	WerFault.exe	bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe

pid	process
2708	bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe

C:\Users\Admin\AppData\Local\Temp\bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe
"C:\Users\Admin\AppData\Local\Temp\bbc07c55011ead9aa4a0d4ccca7aa4e651e147dcf0b45f234d83a1bacba1c917.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2708 -s 464
2⤵
- Program crash
PID:3412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2708 -ip 2708
1⤵
PID:2884